GitHub Repos· Oct 3, 2026· by mdpsec

mdpsec/bug-bounty-hunting-prompts

Open Original Article ↗
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#application-security#bug-bounty#bug-bounty-hunting#cybersecurity#llm-prompts#open-source#penetration-testing#prompt-engineering

More Writeups Like This

medium.com/tag/bug-bounty

HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web

by Krishna Kumar
medium.com/tag/penetration-testing

HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web

by Krishna Kumar
medium.com/tag/bug-bounty

“Trust ’em — let the app handle it!”

by Mohammad Souban Liaqat
medium.com/tag/bug-bounty

⚡ Winning the Race: The Single-Packet Attack on Web Race Conditions

by Krishna Kumar